This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
File:                     Te9bj_uvfVavXTny-UyUbXL3cPM.mft (raw, json)
Hash identifier:          J/UZzQPPSy3T/5xPwi9xP3M53jaIG0deHSFUqH8zFtw=
Subject key identifier:   F8:E5:33:70:CF:1C:FC:3F:6B:5C:72:34:4D:B5:CE:CA:24:A8:7C:6E
Authority key identifier: 4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
Certificate issuer:       /CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Certificate serial:       019AF1D19EE42D9484E6F46A09D39FB3B3DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
Manifest number:          13D9
Signing time:             Sat 06 Dec 2025 04:00:37 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:37 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:37 +0000
Files and hashes:         1: C0P7fdeMbUq_SUkoUNzucceRO_o.roa (hash: IOK/1252dBZyKN3aeAn78pq+rzDgEYZNrHyoRwRIUaA=)
                          2: Te9bj_uvfVavXTny-UyUbXL3cPM.crl (hash: 1Zz4UVUTG3H83W7ivUX0vPQke9X7n1HtBD6cWOZZJoA=)
                          3: a1f2RcCwBt9bPHww1QitG1PQubM.roa (hash: SAUWVRAb+b0RAh7fSmAkBAsYks5uXo8G20Pv9xs5FYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:9e:e4:2d:94:84:e6:f4:6a:09:d3:9f:b3:b3:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
        Validity
            Not Before: Dec  6 04:00:37 2025 GMT
            Not After : Dec  7 04:00:37 2025 GMT
        Subject: CN=f8e53370cf1cfc3f6b5c72344db5ceca24a87c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d3:bf:54:59:b6:6a:8f:76:2a:b1:20:2b:d3:
                    87:e3:10:67:00:43:c2:fe:35:8f:d4:e7:24:8e:27:
                    ff:8b:6c:9b:26:f9:65:b5:9f:16:cc:d4:01:7d:3b:
                    5e:a2:7f:e8:ed:20:d9:e6:7d:c7:23:a1:9f:35:2a:
                    fe:bc:f1:ce:80:8f:3d:8c:7d:5e:c1:68:8a:ef:a5:
                    19:19:96:ee:40:cb:c0:a1:0c:23:4a:fc:f7:2f:66:
                    52:57:36:11:53:9b:8a:f0:41:1d:69:9e:0a:2c:8c:
                    77:00:09:43:16:57:97:10:56:7c:9e:f8:c4:4e:9b:
                    94:fc:2a:32:61:83:3d:ab:34:37:10:7e:bf:9d:86:
                    02:17:41:ba:bf:04:cd:fe:b7:fe:c6:d9:fa:69:9e:
                    e8:35:a0:f0:d5:6c:69:6e:32:aa:e7:0e:b1:d2:b9:
                    99:3b:a5:4b:4b:b0:f7:62:66:d9:6f:33:de:3b:48:
                    9b:e5:65:49:d9:6e:88:26:d3:67:aa:b2:15:da:a8:
                    7a:59:0e:fa:ec:1c:c9:8d:d8:8c:4a:3c:47:5b:d6:
                    25:20:03:90:7c:25:1c:7a:3d:38:56:75:bf:2d:d6:
                    5c:7f:a3:7b:50:9a:13:26:44:49:9a:81:8f:50:3f:
                    1a:af:d0:bf:65:4f:1e:ee:2d:1d:aa:59:6d:c6:ae:
                    51:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E5:33:70:CF:1C:FC:3F:6B:5C:72:34:4D:B5:CE:CA:24:A8:7C:6E
            X509v3 Authority Key Identifier:
                keyid:4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:9f:b5:70:f3:37:01:6b:11:67:24:84:ba:93:aa:f4:1d:6a:
         c7:32:5a:a6:5e:68:a8:9e:c1:be:5b:c5:4a:57:4e:f7:fb:f3:
         95:68:73:af:fa:8e:9b:da:db:c5:3e:cd:fb:c8:20:29:fa:30:
         e2:40:4a:c4:d7:25:f5:88:41:e1:5a:e3:af:66:db:f7:a3:30:
         f4:07:03:5d:4d:72:54:24:16:95:59:d8:46:f8:ce:b7:00:51:
         29:5d:b2:8f:7a:cc:a5:c9:d9:bf:c0:b0:dc:65:ac:1e:30:8b:
         0a:10:27:c4:0c:92:88:74:5a:e5:0f:be:46:a7:00:33:03:29:
         27:1f:f2:f9:30:1c:b9:df:1b:58:ed:c1:b9:11:e4:68:6b:e9:
         ab:72:31:a9:00:2d:73:0c:74:e7:9a:f0:70:ec:cb:dd:27:81:
         13:a1:75:55:6e:c1:96:f0:8c:d3:8b:75:b1:a6:48:b9:38:40:
         4b:cb:e0:54:72:2c:a9:70:05:6b:10:82:98:0e:97:8e:a3:2a:
         a9:60:d0:a0:49:e9:91:d8:72:f8:fb:30:a5:2e:7a:67:b3:1d:
         81:90:15:fc:04:82:82:86:d8:51:3d:b5:63:d1:08:35:e5:c5:
         eb:bd:52:f0:45:f4:75:dd:61:f2:2e:aa:11:2c:02:f4:13:97:
         df:b4:89:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:23:10 2025 by rpki-client